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(57) An MPEG board 6 issues the key data gener- 
ated by the board to a DVD drive 4. The DVD drive 4 
generates enciphering key data on the basis of the key 
data, enciphers the provided data read from a DVD 2 on 
the basis of the key data, and sends it to the MPEG 



board 6. The MPEG board 6 deciphers the enciphered 
provided data using the key data generated by the 
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Description 

Technical Field 

This invention relates to a copy control method and 
copy control apparatus applied to a data processing 
system having the function of reproducing and output- 
ting data, such as movies or music, compressed by, for 
example, the MPEG 2 scheme, (hereinafter, referred to 
as provided data). 

The present invention relates to a copy control 
method and copy control apparatus which, when 
recording and reproducing the data recorded on a large 
capacity recording medium, such as a CD-ROM or a 
DVD (digital video disk), as copied data, enable the 
reproduction of the copied data to be controlled by the 
specific control information recorded on the medium. 

The present invention relates to a method of and 
apparatus for controlling the copying of data supplied 
through communication which are applied to a compu- 
ter system having the function of receiving provided 
data, such as movies or music, via communication 
means and reproducing and outputting the provided 
data. 

Background Art 

For systems that reproduce and output the data, 
such as movies or music, compressed by. for example, 
the MPEG 2 scheme (referred to as provided data) sup- 
plied from the film industry or the music industry, copy 
protection techniques are required to prevent unauthor- 
ized copying. 

In the case of a system that causes a computer to 
process the aforementioned high-value added provided 
data, reproduce the data, and output the resulting data, 
it is essential to establish highly reliable copy protection 
techniques capable of preventing unauthorized copying 
reliably, not such copy protection techniques as would 
be broken by computer processing. 

With conventional copy protection techniques of 
this type, copy protection data is also recorded on a 
recording medium, such as a CD-ROM on which the 
provided data has been recorded, and the copy protec- 
tion data, together with the provided data, is read and 
transferred to a copy protection unit, which performs a 
copy protection process on the provided data, thereby 
preventing unauthorized copying. 

In the case of the conventional copy protection 
techniques, however, the copy protection process is not 
carried out until the provided data recorded on the disk 
has been transferred to the copy protection unit. This 
permits the intentional unauthorized copying of the pro- 
vided data in such a system configuration as has a com- 
puter unit acting as a transfer unit between the disk 
reading unit and reproducing unit. 

As described above, with a conventional system 
where the provided data is exchanged via a computer, a 



highly reliable copy protection technique capable of pre- 
venting unauthorized copying reliably has not been 
established. This leads to the problem of permitting the 
unauthorized copying of all of the provided data, when a 
5 system that enables part of the provided data to be 
selectively read into the computer and used is con- 
structed. 

Disclosure of Invention 

10 

It is, accordingly, an object of the present invention 
to overcome the disadvantages in the prior art by pro- 
viding a highly reliable copy control method and copy 
control apparatus which are capable of preventing 

is unauthorized copying reliably even in a system where a 
computer intervenes in the exchange of data supplied 
from a large capacity recording medium or the like. 

Furthermore, It is an object of the present invention 
to provide a highly reliable copy control method and 

so copy control apparatus which allow the medium side to 
control use of copy arbitrarily on a provided data basis 
without showing the key data used in enciphering and 
deciphering to the computer unit even in a system 
where a computer intervenes in the exchange of data 

25 supplied from a large capacity recording medium, com- 
munication medium, or the like, and which always ena- 
ble the use of the provided data through authorized 
copying. 

Since the present invention is such that, in a system 
30 where a device capable of copying, such as a computer, 
intervenes in the exchange of data supplied from a large 
capacity recording medium, communication medium, or 
the like, the data read from the medium is in the state 
enciphered by a specific key on the device capable of 
35 copying, such as a computer, it is possible to control the 
decision as to whether to reproduce the copied data 
arbitrarily. 

Furthermore, according to the present invention, 
there is provided a highly reliable copy control method 

40 and copy control apparatus which allow the medium 
side to control reproduction of the copied data arbitrarily 
on a provided data basis without showing the key data 
used in enciphering and deciphering to a device capa- 
ble of copying, such as a computer, in a system where 

45 the device capable of copying, such as a computer, 
intervenes in the exchange of data supplied from a large 
capacity recording medium, communication medium, or 
the like, and which always enable the use of the pro- 
vided data through authorized copying. In the present 

so invention, the action of recording the data supplied from 
the large capacity recording medium, communication 
medium, or the like in a storage device once, and read- 
ing and reproducing the recorded data is referred to as 
reproduction of the copied data. 

55 Specifically, the present invention is characterized 
in that, in a system provided with a drive for reading the 
data recorded on a large capacity recording medium, a 
data reproducing device for receiving the data read by 
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the drive via data transfer means, reproducing the 
received data, and outputting the reproduced data, and 
means for recording the data transferred from the data 
transfer means as copied data, the data sent from the 
drive to the data transfer means is enciphered using the s 
key data generated by the data reproducing device and 
only the data reproducing device having the key data 
used in enciphering is allowed to reproduce the copied 
data (i.e.. is allowed to make a first generation copy). 

Furthermore, the present invention is characterized to 
in that, in the above system, the drive and the data 
reproducing device each generate mutually related key 
data separately on the basis of random numbers, the 
drive enciphers the data to be outputted to the data 
transfer means using its self-generated key data, and is 
the data reproducing device deciphers the data 
received from the data transfer means using its self- 
generated secondary key data, thereby permitting only 
the data reproducing device having the related key data 
to perform reproduction without giving to the data trans- 20 
fer means the key data used in enciphering and deci- 
phering and disabling the reproduction of the copied 
data. 

Furthermore, the present invention is characterized 
in that in the system, the drive and the data reproducing 25 
device recognize the copy permission level on the basis 
of the specific control data recorded on the large capac- 
ity recording medium, and when the recognized level is 
the level permitting the copied data to be reproduced, 
the data read by the drive is given to the data transfer 30 
means without enciphering, and when the recognized 
level is the level permitting only a specific data repro- 
ducing device to reproduce the copied data, the data 
read by the drive is enciphered using the key data gen- 
erated by the data reproducing device that is to perform 35 
reproduction and the enciphered data is given to the 
data transfer, and when the recognized level is the level 
inhibiting the reproduction of the copied data, the drive 
and the data reproducing device temporarily generate 
mutually related key data using random numbers, 40 
thereby enabling only the data reproducing device hav- 
ing the related key data to reproduce the data read by 
the drive and disabling all of the data reproducing 
devices including one having the related key data from 
reproducing the copied data. 45 

Furthermore, the present invention is characterized 
in that, in a system including a data providing device for 
providing data via communication means, a data repro- 
ducing device for receiving data from the data providing 
device via the communication means, reproducing the so 
received data, and outputting the reproduced data, and 
means for recording the data provided to the data repro- 
ducing device via the communication means as copied 
data, the data providing device receives key data from 
the data reproducing device and on the basis of the key ss 
data, enciphers the data to be given to the data repro- 
ducing device, thereby enabling only the data reproduc- 
ing device having the key data used in enciphering to 



reproduce the copied data. 

Furthermore, the present invention is characterized 
in that in the above system, the data providing device 
and the data reproducing device generate mutually 
related key data separately using random data, the data 
providing device enciphers the data to be sent to the 
data reproducing device using its self-generated enci- 
phering key data, and the data reproducing device deci- 
phers the data received from the data providing device 
using its self-generated deciphering key data, thereby 
enabling the data received via the communication 
means to be reproduced and disabling the copied data 
from being reproduced. 

Furthermore, the present invention is characterized 
in that in the system, the data providing device sends 
copy permission data specifying the permission level of 
copied data to the data reproducing device, and the 
data reproducing device recognizes the permission 
level of copy of the provided data on the basis of the 
copy permission data received from the data providing 
device and, when the recognized level is the permission 
level enabling the copied data to be reproduced, the 
data to be provided is given without enciphering to the 
data reproducing device via the communication means, 
and when the recognized level is the permission level 
enabling only a specific data reproducing device to 
reproduce the copied data, the key data is received from 
the data reproducing device and the provided data enci- 
phered on the basis of the key data is given to the data 
reproducing device via the communication means, and 
when the recognized level is the permission level inhib- 
iting the copied data from being reproduced, the data 
providing device and the data reproducing device tem- 
porarily generate mutually related key data using ran- 
dom data, and the provided data enciphered on the 
basis of the key data is given to the data reproducing 
device via the communication means. 

With the aforementioned copy control mechanisms, 
even in a system where a device capable of copying, 
such as a computer, intervenes in the exchange of the 
data supplied by a large capacity recording medium, a 
communication medium, or the like, it is possible to con- 
struct a highly reliable system which enables the 
medium side to control the reproduction of the copied 
data on the provided data basis without showing the key 
data used in enciphering and deciphering to a device 
capable of copying, such as a computer, and which 
always enables the provided data to be used in the form 
of authorized copy. 

Brief Description of Drawings 

FIG. 1 is a block diagram of a basic system config- 
uration according to a first embodiment of the 
present invention; 

FIG. 2 is a block diagram of a system configuration 
according to a second embodiment of the present 
invention; 
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FIG. 3 is a flowchart for the processing sequence in 
the second embodiment of the present invention; 
FIG. 4 is a flowchart for the processing sequence in 
the second embodiment of the present invention; 
FIG. 5 is a flowchart for the processing sequence in 
the second embodiment of the present invention; 
FIG. 6 is a flowchart for the processing sequence in 
the second embodiment of the present invention; 
FIG. 7 shows a data format to help explain the copy 
permission data (CGMS) in the media file manage- 
ment data block recorded on the data recording 
medium 20 in the embodiment of the present inven- 
tion; 

FIG. 8 is a conceptual diagram to help explain the 
way that the drive unit, CPU, and reproducing unit 
exchange various types of data for encoding and 
decoding between them in a third embodiment of 
the present invention; 

FIG. 9 is a system block diagram in the third 
embodiment of the present invention; and 
FIG. 10 is a flowchart showing the way that the 
drive unit, CPU, and reproducing unit exchange var- 
ious types of data for encoding and decoding 
between them in the third embodiment of the 
present invention. 

Best Mode of Carrying Out the Invention 

Hereinafter, referring to the accompanying draw- 
ings, embodiments of the present invention will be 
explained. 

First Embodiment 

FIG. 1 is a block diagram showing the basic system 
configuration according to a first embodiment of the 
present invention. The figure illustrates an embodiment 
that permits a first-generation copy in such a manner 
that, with the provided data, such as movies or music, 
recorded on a large capacity storage medium (DVD2) 
being the object of copy protection, only a data repro- 
ducing unit (MPEG board 6) having the enciphered key 
data is allowed to copy and reproduce the data read by 
a drive (DVD drive 4) by enciphering the provided data 
supplied from the drive (DVD drive 4) to data transfer 
means (PC1), using the key data generated in the data 
reproducing unit (MPEG board 6). 

In FIG. 1 , numeral 1 indicates a computer unit (PC) 
acting as data transfer means that supplies the provided 
data read by the drive to the data reproducing unit. The 
computer unit selectively takes in the copy-permitted 
provided data read by the drive, stores it in an external 
storage unit 3, such as an HDD or a DVD-RAM, and 
enables processes, including editing and correction. 

Numeral 2 indicates a DVD disk on which provided 
data, such as movies or music, the object of copy pro- 
tection, has been recorded. On the DVD 2, not only the 
provided data is compressed and recorded by, for 



example, the MPEG 2 scheme, but also the copy per- 
mission data (CGMS) as shown in FIG. 7 is recorded in 
part of the media file management data block so as to 
correspond to the provided data. 

5 Numeral 4 indicates a drive unit that reads the data 
from the DVD 2. The drive unit is referred to as the DVD 
drive. The DVD drive 4 has the function of receiving the 
key data generated in the data reproducing unit and 
enciphering the provided data read by the DVD 2 using 

10 the key data. A concrete configuration of the function is 
shown in FIG. 2. 

Numeral 6 indicates a data reproducing unit that 
receives the provided data read by the DVD drive 4 via 
the computer unit (PC) 1 and performs a reproducing 

is and outputting processes. The data reproducing unit is 
referred to as an MPEG board. The MPEG board 6 is 
provided with a MPEG 2 decoder and obtains the repro- 
duced output data by decoding the provided data com- 
pressed by the MPEG 2 scheme received via the 

so computer unit (PC) 1 . Moreover, the MPEG board 6 has 
the function of not only creating key data and sending 
the key data to the DVD drive 4 but also deciphering the 
provided data using the key data. A concrete configura- 
tion of the function is shown in FIG. 2. 

25 In the configuration of FIG. 1. the MPEG board 6 
not only issues the key data generated at the board 6 to 
the DVD drive 4 but also holds the key data as a deci- 
phering key. 

The DVD drive 4 generates an enciphering key 
30 using the key data and enciphers the provided data read 
by the DVD 2, and thereafter sends the enciphered data 
to the MPEG board 6 via the computer unit (PC) 1 . 

The MPEG board 6 receives the provided data 
enciphered by the DVD drive 4 via the computer unit 
35 (PC) 1 and decodes the enciphered data using the deci- 
phering key. 

Providing such a copy control mechanism enables 
only the MPEG board 6 having the key data used in 
enciphering to record and reproduce the data read by 

40 the DVD drive 4 as copied data. 

Specifically, when the DVD drive 4 performs one 
type of enciphering on a type of (or a piece of) provided 
data, even if a plurality of data reproducing units are 
connected via a data transfer unit, those except for the 

45 data reproducing unit having the key data used in enci- 
phering cannot reproduce the copied data. 

In the concrete configuration, the key data sent 
from the MPEG board 6 to the DVD drive 4 is enci- 
phered. In addition, in the concrete configuration, exclu- 

50 sive control of copy in the embodiment is selectively 
effected according to the copy permission data 
(CGMS). As a concrete example, in FIG. 7, when bO 
and b1 in the CGMS are "01," the aforementioned 
exclusive control of copy is possible. 

55 

Second Embodiment 

FIG. 2 is a block diagram showing a system conf ig- 
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uration in a second embodiment of the present inven- 
tion. The second embodiment realizes a system having 
the function of, according to the copy permission data 
(CGMS) recorded on a large capacity recording 
medium, selectively switching between the copy per- 5 
mission level of copy free at which all of the data repro- 
ducing units are allowed to reproduce the copied data 
obtained by once recording the provided data read by 
the drive, the level at which only a specific data repro- 
ducing unit is allowed to reproduce the copied data, and jo 
the level at which none of the data reproducing units are 
allowed to reproduce the copied data. 

In FIG. 2, reference symbols 10 and 10A indicate 
the component parts corresponding to the computer 
unit (PC) 1 shown in FIG. 1 : 10 indicates the CPU of a 15 
computer body that supervises control of the entire sys- 
tem, and 10A indicates the system bus for the entire 
system. Under the control of the CPU 10, the copy con- 
trol processing as shown in FIGS. 3 to 6 is executed. 
The CPU 10 selectively takes in the provided data per- 20 
mitted to copy read by a drive unit 40 from a data 
recording medium 20, stores it in a storage unit 30, and 
enables processes, including editing and correction. 

Numeral 20 indicates a data recording medium cor- 
responding to a DVD 2. On the data recording medium, 25 
not only the provided data is compressed and recorded 
by the MPEG 2 scheme, but also the copy permission 
data (CGMS) as shown in FIG. 7 is recorded in part of 
the media file management data block so as to corre- 
spond to the provided data. 30 

Numeral 30 indicates a storage unit corresponding 
to the external storage unite 3 of FIG. 1 . The storage 
unit is used to store, edit, and correct the copied data. 

Numeral 40 indicates a drive unit corresponding to 
the DVD drive 4 of FIG. 1 . The drive unit reads the data 35 
from the data recording medium 20. The drive unit com- 
prises cipher generator units 41, 44, registers 42, 43, 

45, 48, 51 for storing an enciphering key, a reading unit 

46, enciphering units 47, 49, and a deciphering unit 50. 
The cipher generator unit 41 generates an enci- ao 

phering key (1) on the basis of a random value obtained 
from a random number generator. 

The register 42 holds the enciphering key (1) gen- 
erated by the cipher generator unit 41. The register 43 
holds the enciphering key (2) received from a reproduc- 45 
ing unit 60 via the system bus 10A. 

The cipher generator unit 44 generates an enci- 
phering key (3) using the enciphering key (1) and enci- 
phering key (2). The register 45 holds the enciphering 
key (3) generated by the cipher generator unit 44. so 

The reading unit 46 reads the data recorded on the 
data recording medium 20. Here, the reading unit reads 
not only the provided data, such as movies or music, the 
object of copy control, but also the copy permission data 
(CGMS) as shown in FIG. 7, indicating the copy permis- 55 
sion level of the provided data. 

According to the copy permission data (CGMS), the 
enciphering unit 47 enciphers the provided data read 



from the data recording medium 20 using the encipher- 
ing key (3) stored in the register 45 or the provided data 
enciphering key (5) stored in the register 51, or sends 
the provided data without enciphering it, to the repro- 
ducing unit 60 via the system bus 10A 

The register 48 holds the copy permission data 
(CGMS) read from the data recording medium 20. The 
enciphering unit 49 enciphers the copy permission data 
(CGMS) stored in the register 48 and sends the enci- 
phered data to the reproducing unit 60 via the system 
bus 10A. 

The deciphering unit 50 deciphers the enciphered 
provided data enciphering key (5) unique to the unit 
received from the reproducing unit 70. The register 51 
holds the enciphering key (5) deciphered by the deci- 
phering unit 50. 

Numeral 60 is a unit that reproduces the provided 
data and corresponds to the MPEG board 6. The repro- 
ducing unit includes an MPEG decoder and obtains the 
reproduced output data by decoding the provided data 
compressed by the MPEG 2 scheme received via the 
system bus 10A. Here, the reproducing unit comprises 
cipher generator units 61 , 64, registers 62, 63, 65, 69, 
71, 72 for storing enciphering keys, deciphering units 
66, 67, an MPEG 2 decoder 68, and an enciphering unit 
70. 

The cipher generator unit 61 generates an enci- 
phering key (2) on the basis of a random value obtained 
from a random number generator. 

The register 62 holds the enciphering key (1) 
received from drive unit 40 via the system bus 10A. The 
register 63 holds the enciphering key (2) generated at 
the cipher generator unit 61 . 

The cipher generator unit 64 generates an enci- 
phering key (4) using the enciphering key (1) and enci- 
phering key (2). The register 65 holds the enciphering 
key (4) generated by the cipher generator unit 64. 

The deciphering unit 66 decodes the enciphered 
copy permission data (CGMS) received from the drive 
unit 40 via the system bus 10A in the computer body. 

According to the copy permission data (CGMS) 
stored in the register 71 , the deciphering unit 67 deci- 
phers the provided data received from the drive unit 40 
via the system bus 10A in the computer body, using the 
enciphering key (4) stored in the register 65 or the pro- 
vided data deciphering key (6) stored in the register 72, 
or sends the provided data without deciphering it, to the 
MPEG 2 decoder 68. 

The MPEG 2 decoder 68 decodes the provided 
data deciphered at the deciphering unit 67 and sends to 
the controller 80 the provided data that can be repro- 
duced and outputted. 

The register 69 holds the provided data enciphering 
key (5) unique to the unit. The enciphering unit 70 enci- 
phers the provided data enciphering key (5) unique to 
the unit stored in the register 69 and sends the enci- 
phered data to the drive unit 40. 

The register 71 holds the copy permission data 
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(CGMS) deciphered at the deciphering unit 66. 

The register 72 holds the provided data deciphering 
key (6) paired with the provided data enciphering key (5) 
(e.g.. both the keys have values in common) unique to 
the unit stored in the register 69. 5 

Numeral 80 indicates a display controller that dis- 
plays the provided data outputted from the MPEG 2 
decoder 68 on a display unit 81 . 

The key values in the registers 45. 65 are cleared 
once at least at the beginning or end of reproduction to 
and are rewritten. The key values in the registers 69. 72 
may be rewritten at the beginning of reproduction, for 
example, instead of being fixed values. 

FIGS. 3 to 6 are flowcharts showing the processing 
sequence in the second embodiment of the present is 
invention. FIGS. 3 and 4 are flowcharts showing the 
sequence of setting various types of key data for the 
enciphering and deciphering processes. FIGS. 5 and 6 
are flowcharts showing the copy control processing 
sequence in reading the provided data. so 

FIG. 7 illustrates a data format to help explain the 
copy permission data (CGMS) in the media file man- 
agement data block recorded on the data recording 
medium 20. Here, when bO. bl in the CGMS are "00." 
all of the reproducing units 60 are allowed to reproduce 25 
the copied data; when bO. b1 are "01." only the repro- 
ducing unit used in reading the provided data is allowed 
to reproduce the copied data exclusively; and when bO. 
b1 is "11," none of the reproducing unit is allowed to 
reproduce the provided data. so 

Now, the operation of the second embodiment of 
the present invention will be described by reference to 
FIGS. 2 to 7. 

First, the process of setting various types of key 
data for the enciphering and deciphering processes will 35 
be described by reference to the flowcharts shown in 
FIGS. 3 and 4. 

As a result of system start-up by a reproduction 
instruction, the cipher generator unit 41 in the drive unit 
40 generates the enciphering key (1) on the basis of a <k> 
random value (step 40a in FIG. 3). 

The enciphering key (1) generated by the cipher 
generator unit 41 is not only stored in the register 42 but 
also set in the register 62 in the reproducing unit 60 
under the control of the CPU 10 (step 1 0a in FIG. 3 and 45 
step 60a in FIG. 4). 

The cipher generator unit 61 in the reproducing unit 
60 generates an enciphering key (2) on the basis of a 
random value (step 60b in FIG. 4). 

The enciphering key (2) generated at the cipher so 
generator unit 61 is not only stored in the register 63 but 
also set in the register 43 in the drive unit 40 under the 
control of the CPU 10 (steps 10b and 40b in FIG. 3). 

The cipher generator unit 44 in the drive unit 40 
generates an enciphering key (3) using the enciphering 55 
key (1) stored in the register 42 and the enciphering key 
(2) stored in the register 43 and then sets it in the regis- 
ter 45 (step 40c in FIG. 3). 



The cipher generator unit 64 in the drive unit 60 
generates an enciphering key (4) using the enciphering 
key (1) stored in the register 62 and the enciphering key 
(2) stored in the register 63 and then sets it in the regis- 
ter 65 (step 60c in FIG. 4). 

The reading unit 46 in the drive unit 40 reads the 
copy permission data (CGMS) from the data recording 
medium 20 and sets it in the register 48 (step 40d in 
FIG. 3). 

The enciphering unit 49 enciphers the copy permis- 
sion data (CGMS) set in the. register 48, using the enci- 
phering key (3) stored in the register 45 (step 40e in 
FIG. 3). The enciphered copy permission data (CGMS) 
is given to the deciphering unit 66 in the reproducing 
unit 60 under the control of the CPU 1 0 (step 1 0c in FIG. 
3). 

The deciphering unit 66 deciphers the enciphered 
copy permission data (CGMS) received from the drive 
unit 40, using the enciphering key (4) stored in the reg- 
ister 65, and then sets it in the register 71 (step 60d in 
FIG. 4). 

The control unit (not shown) in the reproducing unit 
60 determines the contents of the copy permission data 
(CGMS) stored in the register 71. When determining 
that bO. b1 in the copy permission data (CGMS) are "01" 
and therefore recognizing that only the reproducing unit 
used in reading the provided data is allowed to repro- 
duce the copied data exclusively, the control unit starts 
up the enciphering unit 70 (step 60e (Yes) in FIG. 4). 

Then, the enciphering unit 70 enciphers the pro- 
vided data enciphering key (5) unique to the unit fixedly 
stored in the register 69, using the enciphering unit (4) 
stored in the register 65 (step 60g in FIG. 4). 

When bO, b1 in the copy permission data (CGMS) 
are not "01," dummy data (a null value) is generated in 
place of the provided data enciphering key (5) (step 60f 
in FIG; 4). 

The CPU 10 transfers the enciphered provided data 
enciphering key (5) unique to the unit or the dummy 
data substituting for that key to the deciphering unit 50 
in the drive unit 40 (step 10d in FIG. 3). 

The deciphering unit 50 deciphers the enciphered 
provided data enciphering key (5) unique to the unit 
received from the reproducing unit 60 and then sets the 
deciphered data in the register 51 . 

The above process completes the process of set- 
ting various types of key data for the enciphering and 
deciphering processes. 

Next, the copy control process in reading the pro- 
vided data will be described by reference to the flow- 
charts in FIGS. 5 and 6. 

The CPU 1 0 gives the drive unit 40 an instruction to 
read the provided data (step S1 in FIG. 5). 

Receiving a read instruction from the CPU 10, the 
control unit (not shown) in the drive unit 40 starts up the 
reading unit 46. The reading unit 46 provides drive con- 
trol of the data recording medium 20 and reads the pro- 
vided data (MPEG 2 data) and the copy permission data 
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(CGMS) from the data recording medium 20 (step S2 in 
FIG. 5). 

The copy permission data (CGMS) read from the 
data recording medium 20 is stored in the register 48 
and then is supplied to the enciphering unit 47. 

The enciphering unit 47 determines the contents of 
the copy permission data (CGMS) stored in the register 
48. When determining thatbO, b1 in the CGMS are "00." 
the enciphering unit outputs (passes) the provided data 
directly without enciphering the provided data. When 
they are "01," the enciphering unit enciphers the pro- 
vided data using the provided data enciphering key (5) 
unique to the unit stored in the register 51 . When they 
are "1 1 ," the enciphering unit enciphers the provided 
data using the enciphering key (3) stored in the register 
45 (steps S3 to S7 in FIG. 5). 

The provided data (MPEG 2 data) outputted from 
the enciphering unit 47 is transferred to the deciphering 
unit 67 in the reproducing unit 60 via the system bus 
10A (step S8 in FIG. 5). 

When receiving the provided data (MPEG 2 data) 
from the enciphering unit 47 in the drive unit 40, the 
deciphering unit 67 in the reproducing unit 60 deter- 
mines the contents of the copy permission data (CGMS) 
stored in the register 71. When determining that bO, b1 
in the CGMS are "00," the deciphering unit outputs 
(passes) the provided data directly without deciphering 
the provided data. When they are "01 ," the deciphering 
unit deciphers the provided data using the provided 
data enciphering key (6) unique to the unit stored in the 
register 72. When they are "1 1 ," the deciphering unit 
deciphers the provided data using the enciphering key 

(4) stored in the register 65 (steps S1 1 to S1 6 in FIG. 5). 

The provided data (MPEG 2 data) outputted from 
the deciphering unit 67 is decoded by the MPEG 2 
decoder 68. Then, the decoded data is sent to the dis- 
play controller 80 and is displayed on the display unit 81 
(step S17 in FIG. 5). 

In this case, when bO, b1 in the copy permission 
data (CGMS) are "00," the CPU 10 can reproduce and 
output the copied data arbitrarily without specifying a 
reproducing unit, by loading the provided data (MPEG 2 
data) into the storage unit 30. 

When bO, b1 in the copy permission data (CGMS) 
are "01," loading the provided data (MPEG 2 data) into 
the storage unit 30 enables only the reproducing unit 60 
having the provided data enciphering key (6) unique to 
the unit paired with the provided data enciphering key 

(5) unique to the unit used in the enciphering process to 
reproduce the copied data. 

In this case, when the copied data, together with 
the enciphering key (6) stored in the register 72. is 
stored in the storage unit 30, the corresponding copied 
data can be reproduced by reading the stored key data 
and resetting it in the register 72, even if the key value in 
the register 72 is rewritten in a later reproducing proc- 
ess. 

When bO, b1 in the copy permission data (CGMS) 



is "11," the copied data cannot be deciphered because 
the value of the enciphering key (4) has already 
changed at the time of reproduction, even if the pro- 
vided data (MPEG 2 data) is loaded as the copied data 

5 into the storage unit 30. As a result, none of the repro- 
ducing units can reproduce the copied data. 

By setting new key values in the registers 69. 72 or 
the registers 45. 65 each time the contents of the copy 
permission data (CGMS) are changed, a highly reliable 

io copy protection mechanism enabling accurate permis- 
sion control on a given data amount basis can be imple- 
mented. 

As described above, with the configuration that 
enables each item of the provided data (each title of the 

)5 movies or music) to be enciphered and prevents a com- 
puter or the like from reading the data easily, highly reli- 
able copy control of provided data most suitable for 
computer processing is established. 

Since only the data reproducing unit used in read- 

20 ing is allowed to reproduce a copy of the data read by a 
computer or the like, this enables authorized use of the 
copied data and prevents unauthorized use of the cop- 
ied data. 

25 Third Embodiment 

Hereinafter, a third embodiment of the present 
invention will be explained by reference to FIGS. 8 to 1 0. 
First, a CPU 10 sends "START AUTHENTICATION" 

30 command to a drive unit 90 (step S41). In response to 
the START AUTHENTICATION" command, the RAN ID 
generator unit in the drive unit 90 causes a random gen- 
erator to generate a random number and sends the 
generated random number as RANID to the CPU 10 

35 (steps S21 , S23). The RANID is an ID for identifying one 
MPEG board, when there are a plurality of MPEG 
boards acting as reproducing units, for example. The 
CPU 10 acquires the RANID from the drive unit 90 and 
sends it to the reproducing unit 120. The reproducing 

io unit 120 causes a CHKEY 1 generator unit 121 to enci- 
pher the RANID using algorithm A, generate CHKEY 1. 
hold it. and send it to the CPU 10 (steps S71, S73). The 
CHKEY 1 is a key tor identifying an MPEG board or a 
disk drive unit. The CPU 10 acquires the CHKEY 1 from 

is the reproducing unit 1 20 and transfers it to the drive unit 
90 (step S43). The drive unit 90 causes an enciphering 
unit 95 to encipher the CHKEY 1 using algorithm B, 
generate KEY 1, hold it, and send it to the CPU 10 
(steps S25, 27). The CPU 10 acquires the KEY 1 from 

so the drive unit 90 and transfers it to the reproducing unit 
120. The reproducing unit 120 causes a cipher genera- 
tor unit 123 to encipher the held CHKEY 1 using algo- 
rithm B, generate KEY 1 , and compare it with the KEY 1 
acquired from the CPU. If the comparison result shows 

55 that they coincide with each other, this means that the 
authentication of the drive unit by the reproducing unit 
has finished correctly. 

Furthermore, the drive unit 90 causes the cipher 
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generator unit 99 to encipher the held KEY 1 using algo- 
rithm C, generate KEY 2, hold it, and send it to the CPU 
(stepS29). The CPU 10 acquires the CHKEY 2 from the 
drive unit 90 and transfers it to the reproducing unit 120. 
If the comparison result at step S75 shows that they 
coincide with each other, the reproducing unit 120 
causes the cipher generator unit 139 to encipher the 
CHKEY 2 sent from the CPU using algorithm D, gener- 
ate KEY 2, hold the KEY 2, and send it to the CPU 10. 
The CPU 10 acquires the KEY 2 from the reproducing 
unit 120 and transfers it to the drive unit (step S49). The 
drive unit causes the cipher generator unit 101 to enci- 
pher the held KEY 2 using algorithm D and generate 
KEY 2 and causes a comparison circuit 105 to compare 
the KEY 2 with the KEY 2 acquired from the CPU (steps 
S29, S31). If the comparison result shows that they 
coincide with each other, this means that the drive unit 
has authenticated the reproducing unit properly. As a 
result, the mutual authentication between the drive unit 
and the reproducing unit has been completed. Then, the 
drive unit causes the enciphering unit 113 to encipher 
the DISK KEY and the TITLE KEY using the KEY 1, 
KEY 2, and algorithm and send the enciphered data to 
the DPU (step S33). The CPU acquires the enciphered 
DISK KEY and TITLE KEY from the drive unit and 
sends it to the reproducing unit (step S51). The repro- 
ducing unit causes the deciphering unit 1 37 to decipher 
the enciphered DISK KEY and TITLE KEY using the 
KEY 1, KEY 2, and algorithm E. Explanation of the copy 
permission data will not be given, because it is the same 
as in the second embodiment. 

As described above, with the embodiment of the 
present invention, it is possible to construct a highly reli- 
able system which allows the medium side to control 
use of copy arbitrarily on a provide data basis without 
showing the key data used in enciphering and decipher- 
ing to a computer unit even in a system where the com- 
puter unit intervenes in the exchange of data supplied 
from a large capacity recording medium or the like, and 
which always enables use of the provided data through 
authorized copying. 

While in the embodiment, a large capacity disk, 
such as a DVD or a CD-ROM, requiring a drive unit has 
been taken as an example of a data providing medium, 
the present invention may be applied to a system con- 
figuration where a data providing medium is provided 
externally via, for example, a communication channel, in 
the same manner as in the above embodiment. This 
configuration can be implemented easily by providing 
an external data providing unit that makes communica- 
tion with the individual component parts of the drive unit 
40 except for the reading unit in FIG. 2 and by replacing 
the signal paths represented by broken lines in FIG. 2 
with communication paths. 

While in the embodiment, the copy permission data 
(CGMS) and the provided data enciphering key (5) 
unique to the unit are enciphered and then transferred, 
they are not necessarily enciphered. They may not be 



enciphered, depending on . the degree of reliability 
required. 

While in the second embodiment, the drive unit 40 
and reproducing unit 60 each generate the primary key 

5 data on the basis of random data, the present invention 
is not restricted this. For instance, at least either the 
drive unit 40 or the reproducing unit 60 may generate 
the primary key data on the basis of random data, and 
on the basis of the primary key data, the drive unit 40 

io and reproducing unit 60 each generate temporary sec- 
ondary key data by themselves. The essential thing is 
that the drive unit and data reproducing unit have only to 
temporarily generate the mutually related key data 
using random data. 

is Furthermore, while in the embodiment, the pro- 
vided data enciphering key (5) unique to the unit and the 
provided data deciphering key (6) unique to the unit are 
provided independently in the reproducing unit 60 and 
are stored in the registers 69 and 79 separately, the 

20 present invention is not limited to this. For instance, 
common key data may be used for both of the provided 
data enciphering key (5) and deciphering key (6) unique 
to the unit. The essential thing is that the reproducing 
unit 60 has only to grasp the enciphering scheme of the 

25 inputted provided data and the contents of the encipher- 
ing key in order to decipher the inputted provided data. 

Still furthermore, while in the second embodiment, 
the copy control mechanism which permits a first-gener- 
ation copy in such a manner that only the reproducing 

ao unit 60 having the provided data enciphering key (6) 
unique to the unit paired with the provided data enci- 
phering key (5) unique to the unit used in enciphering is 
allowed to reproduce the copy, and the copy control 
mechanism which prevents all of the reproducing units 

35 from reproducing the copy are used selectively, the 
present invention is not limited to this. For instance, the 
copy permission modes may be combined arbitrarily as 
follows: the copy permission mode of free copy and the 
copy permission mode that prevents all of the reproduc- 

40 ing units from reproducing the copy may be combined; 
or the copy permission mode of free copy and the copy 
permission mode of first-generation copy may be com- 
bined. 

Still furthermore, while in the embodiments, the 
4S system where a computer intervenes in the exchange of 
the data provided from a large capacity recording 
medium, communication medium, or the like has been 
used, the present invention is not restricted to this, but 
may be applied to a system configuration where a corn- 
so puter does not intervene directly in the exchange of the 
provided data. For instance, the copy control mecha- 
nism may be applied to the interface section between 
units capable of reproducing the provided data between 
a drive that reads the provided data from an MD, a CD- 
55 ROM, or a DVD, or a communication medium having the 
function of transmitting the provided data, and a unit 
that reproduces the read-out data. 

Still furthermore, while in the embodiments, the 
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provided data, such as movies or music, compressed by 
the MPEG 2 scheme has been used, the present inven- 
tion is not limited to this. For instance, the present inven- 
tion may be applied to a system configuration capable of 
reproducing the data compressed by the MPEG 1 or 5 
MPEG 4 scheme. 

While in the embodiments, the provided data 
recorded on the recording medium has been raw data, 
all of the provided data may be enciphered and 
recorded on a recording medium or only part of the pro- 10 
vided data may be enciphered and recorded on a 
recording medium. 

3. 

Industrial Applicability 

15 

It is possible to provide a highly reliable copy control 
method and copy control apparatus which allow the 
medium side to control use of copy arbitrarily on a pro- 
vided data basis without showing the key data used in 
enciphering and deciphering to a device capable of cop- so 
ying, such as a computer, in a system where a device 
capable of copying, such as a computer, intervenes in 
the exchange of data supplied from a large capacity 
recording medium, communication medium, or the like, 
and which always enable use of the provided data 25 
through authorized copying. 

Claims 

1 . In a system provided with a drive for reading the 30 
data recorded on a large capacity recording 
medium and a data reproducing device for receiv- 
ing the data read by the drive via data transfer 
means, reproducing the received data, and output- 
ting the reproduced data, a copy control method for 35 
the data recorded on a large capacity recording 4. 
medium characterized in that: 

the drive receives key data from the data repro- 
ducing device, enciphers the data read from 40 
the large capacity recording medium on the 
basis of the key data, and gives the enciphered 
data to the data transfer means; and 
the data reproducing device reproduces the 
enciphered data received from the data trans- 45 
fer means by deciphering the enciphered data 
on the basis of the key data related to the key 
data issued to the drive. 

2. In a system provided with a drive for reading the so 
data recorded on a large capacity recording 
medium, a data reproducing device for receiving 
the data read by the drive via data transfer means, 
reproducing the received data, and outputting the 
reproduced data, and means for recording the data ss 
transferred from the data transfer means, a copy 
control method for the data recorded on a large 
capacity recording medium characterized in that: 



the data reproducing device issues key data to 
the drive; 

the drive enciphers the data read from the large 
capacity recording medium on the basis of the 
key data received from the data reproducing 
device, and gives the enciphered data to the 
data transfer means; and 
only the data reproducing device that has 
issued the key data to the drive can reproduce 
the data recorded via the data transfer means 
by deciphering the recorded data. 

In a system provided with a drive for reading the 
data recorded on a large capacity recording 
medium and a data reproducing device for receiv- 
ing the data read by the drive via data transfer 
means, reproducing the received data, and output- 
ting the reproduced data, a copy control method for 
the data recorded on a large capacity recording 
medium characterized in that: 

the drive and the data reproducing device tem- 
porarily generate key data items relating to 
each other using random data; and 
the drive enciphers the data to be outputted to 
the data transfer means using its self-gener- 
ated temporary key data and the data repro- 
ducing device deciphers the data received from 
the data transfer means using its self-gener- 
ated temporary key data, thereby 
enabling the data read from the drive to be 
reproduced, and disabling the copied data 
obtained by once recording the data read from 
the drive from being reproduced. 

In a system provided with a drive for reading the 
data recorded on a large capacity recording 
medium and a data reproducing device for receiv- 
ing the data read by the drive via data transfer 
means, reproducing the received data, and output- 
ting the reproduced data, a copy control method for 
the data recorded on a large capacity recording 
medium characterized in that: 

at least either the drive or the data reproducing 
device generates primary key data on the basis 
of random data and the drive and data repro- 
ducing device each generate a temporary sec- 
ondary key data item by themselves on the 
basis of the key data; and 
the drive enciphers the data to be outputted to 
the data transfer means using its self-gener- 
ated secondary key data item, and the data 
reproducing device deciphers the data 
received from the data transfer means using its 
self-generated secondary key data item, 
thereby 

enabling the data read from the drive to be 
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reproduced and disabling the copied data from 
being reproduced. 

5. In a system provided with a drive for reading the 
data recorded on a large capacity recording s 
medium and a data reproducing device for receiv- 
ing the data read by the drive via data transfer 
means, reproducing the received data, and output- 
ting the reproduced data, a copy control method for 

the data recorded on a large capacity recording 10 
medium characterized in that: 

the drive and the data reproducing device each 
generate primary key data on the basis of ran- 
dom data, exchange the key data items with 
each other, and the drive and each generate a 
temporary secondary data item by themselves 
on the basis of the primary key data; and 
the drive enciphers the data to be outputted to 
the data transfer means using its self-gener- 
ated secondary key data item, and the data 
reproducing device deciphers the data 
received from the data transfer means using its 
self-generated secondary key data item, 
thereby 

disabling the copied data from being repro- 
duced by hiding the key data used in encipher- 
ing and deciphering from the data transfer 
means. 

6. In a system provided with a drive for reading the 
data recorded on a large capacity recording 
medium and a data reproducing device for receiv- 
ing the data read by the drive via data transfer 
means, reproducing the received data, and output- 
ting the reproduced data, a copy control method for 
the data recorded on a large capacity recording 
medium characterized in that: 

the drive reads specific control data from the 
large capacity recording medium in reading the 
data to be reproduced and, from the control 
data, recognizes the copy permission level for 
the copied data obtained by once recording the 
data read from the recording medium and, 
when the copy permission level is a level that 
permits only a specific data reproducing device 
to reproduce the copied data, receives the data 
on which a key is based from the data repro- 
ducing device that is to reproduce the data, 
enciphers the data read from the large capacity 
recording medium according to the key data 
generated on the basis of the received data, 
and gives the enciphered data to the data 
transfer means and. 

when the copy permission level is a level that 
inhibits all of the data reproducing devices from 
reproducing the copied data, receives random 



data from the data reproducing device that is to 
reproduce the data, generates temporary key 
data on the basis of the received data, enci- 
phers the data read from the large capacity 
recording medium on the basis of the key data, 
and gives the enciphered data to the data 
transfer means, thereby 
making it possible to control copy permission of 
the copied data on the basis of the specific con- 
trol data recorded on the large capacity record- 
ing medium. 

7. A copy control method according to claim 1, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 

8. A copy control method according to claim 2, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 

9. A copy control method according to claim 3, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 

10. A copy control method according to claim 4, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 

11. A copy control method according to claim 5. 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 

12. A copy control method according to claim 6, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 



13. A copy control method according to claim 1. 
wherein the data reproducing device is imple- 
mented by a reproducing board provided with an 
MPEG decoder designed for MPEG 1, MPEG 2, or 
MPEG 4. 

14. A copy control method according to claim 2, 
wherein the data reproducing device is imple- 
mented by a reproducing board provided with an 
MPEG decoder designed for MPEG 1 , MPEG 2. or 
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MPEG 4. 

15. A copy control method according to claim 3, 
wherein the data reproducing device is imple- 
mented by a reproducing board provided with an s 
MPEG decoder designed for MPEG 1 . MPEG 2, or 
MPEG 4. 

16. A copy control method according to claim 4. 
wherein the data reproducing device is imple- 10 
mented by a reproducing board provided with an 
MPEG decoder designed for MPEG 1 , MPEG 2, or 
MPEG 4. 

17. A copy control method according to claim 5, is 
wherein the data reproducing device is imple- 
mented by a reproducing board provided with an 
MPEG decoder designed for MPEG 1 , MPEG 2. or 
MPEG 4. 

20 

18. A copy control method according to claim 6. 
wherein the data reproducing device is imple- 
mented by a reproducing board provided with an 
MPEG decoder designed for MPEG 1 . MPEG 2. or 
MPEG 4. 25 

19. A copy control method according to claim 1. 
wherein the large capacity recording medium is 
implemented by a disk on which provided data 
including video data compressed by the MPEG 1, 30 
MPEG 2, or MPEG 4 scheme has been recorded 
fixedly. 

20. A copy control method according to claim 2, 
wherein the large capacity recording medium is 35 
implemented by a disk on which provided data 
including video data compressed by the MPEG 1 , 
MPEG 2, or MPEG 4 scheme has been recorded 
fixedly. 

40 

21. A copy control method according to claim 3, 
wherein the large capacity recording medium is 
implemented by a disk on which provided data 
including video data compressed by the MPEG 1. 
MPEG 2, or MPEG 4 scheme has been recorded 45 
fixedly. 

22. A copy control method according to claim 4, 
wherein the large capacity recording medium is 
implemented by a disk on which provided data so 
including video data compressed by the MPEG 1. 
MPEG 2, or MPEG 4 scheme has been recorded 
fixedly. 

23. A copy control method according to claim 5. 55 
wherein the large capacity recording medium is 
implemented by a disk on which provided data 
including video data compressed by the MPEG 1 , 



MPEG 2, or MPEG 4 scheme has been recorded 
fixedly. 

24. A copy control method according to claim 6, 
wherein the large capacity recording medium is 
implemented by a disk on which provided data 
including video data compressed by the MPEG 1 . 
MPEG 2, or MPEG 4 scheme has been recorded 
fixedly. 

25. A copy control method according to claim 1 , further 
including means for holding the key data generated 
at the data reproducing device so that the key data 
may correspond to the copied data. 

26. A copy control method according to claim 2, further 
including means for holding the key data generated 
at the data reproducing device so that the key data 
may correspond to the copied data. 

27. A copy control method according to claim 3, further 
including means for holding the key data generated 
at the data reproducing device so that the key data 
may correspond to the copied data. 

28. A copy control method according to claim 1 , further 
including means for setting key data having a given 
value. 

29. A copy control method according to claim 2, further 
including means for setting key data having a given 
value. 

30. A copy control method according to claim 3, further 
including means for setting key data having a given 
value. 

31 . A copy control method according to claim 1 , further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 

32. A copy control method according to claim 2, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 

33. A copy control method according to claim 3, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 

34. A copy control method according to claim 4, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
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each time at least reproduction is started or com- 
pleted. 

35. A copy control method according to claim 5, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 

36. A copy control method according to claim 6, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 

37. A copy control method according to claim 1, 
wherein the data reproducing device includes 
means having enciphering key data and decipher- 
ing key data related to each other and for encipher- 
ing at least the enciphering key data and sending it 
to the drive. 

38. A copy control method according to claim 2, 
wherein the data reproducing device includes 
means having enciphering key data and decipher- 
ing key data related to each other and for encipher- 
ing at least the enciphering key data and sending it 
to the drive. 

39. A copy control method according to claim 6, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time the contents of specific control data read 
from the large capacity recording medium has 
changed. 

40. A copy control method according to claim 1 , further 
including means for enciphering the key data 
exchanged between the drive and the data repro- 
ducing device on the data transfer means. 

41. A copy control method according to claim 3, further 
including means for enciphering the key data 
exchanged between the drive and the data repro- 
ducing device on the data transfer means. 

42. A copy control method according to claim 4, further 
including means for enciphering the key data 
exchanged between the drive and the data repro- 
ducing device on the data transfer means. 

43. A copy control method according to claim 5, further 
including means for enciphering the key data 
exchanged between the drive and the data repro- 
ducing device on the data transfer means. 

44. A copy control method according to claim 6, further 
including means for enciphering the key data 



exchanged between the drive and the data repro- 
ducing device on the data transfer means. 

45. In a data reproducing device provided with a 
5 decoder that receives the data recorded on a large 
capacity recording medium and read by a drive 
device and performs reproduction, the data repro- 
ducing device for a large capacity recording 
medium characterized by comprising means for 
10 issuing key data for deciphering the data received 
from the drive to the internal circuitry and issuing, to 
the drive, key data for deciphering the data output- 
ted from the drive. 

is 46. In a drive device for a large capacity recording 
medium which reads the data recorded on a large 
capacity recording medium and gives it to a data 
reproducing device, the drive device for a large 
capacity recording medium characterized by corn- 
so prising means for receiving key data from the data 
reproducing device and holding it in reproducing 
the data recorded on the large capacity recording 
medium, and means for enciphering the data trans- 
ferred to the data reproducing device on the basis 
25 of the key data. 

47. In a system including a drive for reading the data 
recorded on a large capacity recording medium, a 
data reproducing device for receiving the data read 

30 from the drive via data transfer means, reproducing 
the received data, and outputting the reproduced 
data, and means for recording the data transferred 
from the data transfer means as copied data, the 
copy control device characterized in that: 

35 

the data reproducing device is provided with 
means for generating key data and means for 
issuing the key data to the drive; and 
the drive is provided with means for receiving 

40 the key data and enciphering the data read 

from the large capacity recording medium on 
the basis of the key data, thereby 
allowing only the data reproducing device that 
has issued the key data to the drive to repro- 

45 duce the copied data. 

48. In a system including a drive for reading the data 
recorded on a large capacity recording medium and 
a data reproducing device for receiving the data 

so read from the drive via data transfer means, repro- 
ducing the received data, and outputting the repro- 
duced data, a copy control device for the data 
recorded on a large capacity recording medium 
characterized in that: 

55 

the drive and the data reproducing device are 
each provided with means for creating key data 
separately on the basis of mutually related 
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data; 

the drive is provided with means for encipher- 
ing the data to be outputted to the data transfer 
means on the basis of its self-generated key 
data; and 5 
the data reproducing device is provided with 
means for deciphering the data received from 
the data transfer means on the basis of its self- 
generated key data, thereby 
hiding the key data used in enciphering and 10 
deciphering from the data transfer means. 

49. In a system including a drive for reading the data 
recorded on a large capacity recording medium and 
a data reproducing device for receiving the data »s 
read from the drive via data transfer means, repro- 
ducing the received data, and outputting the repro- 
duced data, a copy control device characterized in 



at least either the drive or the data reproducing 
device is provided with means for creating pri- 
mary key data on the basis of random data; 
and 

the drive and the data reproducing device are 25 
provided with means for creating temporary 
secondary key data by themselves on the basis 
of the primary key data, whereby 
the drive enciphers the data to be outputted to 
the data transfer means using its self-gener- so 
ated secondary key data and the data repro- 
ducing device deciphers the data received from 
the data transfer means using its self-gener- 
ated secondary key data. 

35 

50. In a system including a drive for reading the data 
recorded on a large capacity recording medium and 
a data reproducing device for receiving the data 
read from the drive via data transfer means, repro- 
ducing the received data, and outputting the repro- 40 
duced data, a copy control device characterized in 
that: 

the drive and the data reproducing device are 
each provided with means for generating pri- 45 
mary key data on the basis of random data and 
means for creating secondary key data using 
the corresponding generated primary key data, 
whereby 

the drive enciphers the data to be outputted to so 
the data transfer means using its self-gener- 
ated secondary key data and the data repro- 
ducing device deciphers the data received from 
the data transfer means using its self-gener- 
ated secondary key data. ss 

51 . In a system including a drive for reading the data 
recorded on a large capacity recording medium, a 



data reproducing device for receiving the data read 
from the drive via data transfer means, reproducing 
the received data, and outputting the reproduced 
data, and means for recording the data transferred 
from the data transfer means as copied data, a 
copy control device characterized in that: 

the drive and the data reproducing device are 
each provided with means for holding mutually 
related data and means for receiving the spe- 
cific control data recorded on the large capacity 
recording medium and determining the copy 
permission level for the data read from the 
large capacity recording medium; and 
the drive is provided with means for encipher- 
ing the data read from the large capacity 
recording medium according to the copy per- 
mission level so as to allow only the data repro- 
ducing device having the related key data to 
decipher the copied data, or so as to prevent all 
of the data reproducing devices from decipher- 
ing the copied data, or giving the copied data to 
the data transfer means without enciphering, 
thereby 

making it possible to control copy permission of 
the copied data arbitrarily on the basis of the 
specific control data recorded on the large 
capacity recording medium. 

52. A copy control device according to claim 51, 
wherein the data reproducing device is provided 
with means for generating key data and means for 
issuing the key data to the drive and the drive is pro- 
vided with means for receiving the key data and on 
the basis of the key data, enciphering the data read 
from the large capacity recording medium, thereby 
enabling only a specific data reproducing device to 
reproduce the copied data. 

53. A copy control device according to claim 51, 
wherein the drive and the data reproducing device 
are provided with means for generating key data 
separately on the basis of mutually related data, the 
drive is provided with means for enciphering the 
data to be outputted to the data transfer means 
using its self-generated key data, and the data 
reproducing device is provided with means for deci- 
phering the data received from the data transfer 
means using its self-generated key data, thereby 
preventing all of the data reproducing devices from 
reproducing the copied data. 

54. A copy control device according to claim 47, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 
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55. A copy control device according to claim 48, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 

56. A copy control device according to claim 49, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 

57. A copy control device according to claim 50, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 

58. A copy control device according to claim 51, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 

59. A copy control device according to claim 52, 
wherein the data transfer means is implemented by 
a computer device, a data transfer device, or 
another device capable of recording the data to be 
transferred. 

60. A copy control device according to claim 47, 
wherein the data reproducing device is imple- 
mented by a board provided with an MPEG 
decoder designed for MPEG 1 , MPEG 2, or MPEG 
4. 



65. A copy control device according to claim 52, 
wherein the data reproducing device is imple- 
5 mented by a board provided with an MPEG 
decoder designed for MPEG 1 , MPEG 2, or MPEG 



66. A copy control device according to claim 47, 
jo wherein the large capacity recording medium is 

implemented by a disk on which provided data 
including video data compressed by the MPEG 1 , 
MPEG 2, or MPEG 4 scheme has been recorded 
fixedly. 

15 

67. A copy control device according to claim 48, 
wherein the large capacity recording medium is 
implemented by a disk on which provided data 
including video data compressed by the MPEG 1 , 

so MPEG 2, or MPEG 4 scheme has been recorded 
fixedly. 

68. A copy control device according to claim 49, 
wherein the large capacity recording medium is 

25 implemented by a disk on which provided data 
including video data compressed by the MPEG 1 , 
MPEG 2, or MPEG 4 scheme has been recorded 
fixedly. 

30 69. A copy control device according to claim 50, 
wherein the large capacity recording medium is 
implemented by a disk on which provided data 
including video data compressed by the MPEG 1. 
MPEG 2, or MPEG 4 scheme has been recorded 

35 fixedly. 



61. A copy control device according to claim 48, 
wherein the data reproducing device is imple- 
mented by a board provided with an MPEG 
decoder designed for MPEG 1 , MPEG 2, or MPEG 



62. A copy control device according to claim 49, 
wherein the data reproducing device is imple- 
mented by a board provided with an MPEG 
decoder designed for MPEG 1 , MPEG 2, or MPEG 



63. A copy control device according to claim 50, 
wherein the data reproducing device is imple- 
mented by a board provided with an MPEG 
decoder designed for MPEG 1 , MPEG 2, or MPEG 



64. A copy control device according to claim 51. 
wherein the data reproducing device is imple- 
mented by a board provided with an MPEG 
decoder designed for MPEG 1. MPEG 2, or MPEG 



70. A copy control device according to claim 51, 
wherein the large capacity recording medium is 
implemented by a disk on which provided data 

40 including video data compressed by the MPEG 1 , 
MPEG 2, or MPEG 4 scheme has been recorded 
fixedly. 

71. A copy control device according to claim 52, 
45 wherein the large capacity recording medium is 

implemented by a disk on which provided data 
including video data compressed by the MPEG 1 , 
MPEG 2, or MPEG 4 scheme has been recorded 
fixedly. 

50 

72. A copy control device according to claim 53. 
wherein the large capacity recording medium is 
implemented by a disk on which provided data 
including video data compressed by the MPEG 1 , 

55 MPEG 2, or MPEG * scheme has been recorded 
fixedly. 

73. A copy control device according to claim 47. further 
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including means for holding the key data generated 
at the data reproducing device so that the key data 
may correspond to the copied data. 

74. A copy control device according to claim 51 , further s 
including means for holding the key data generated 

at the data reproducing device so that the key data 
may correspond to the copied data. 

75. A copy control device according to claim 52. further w 
including means tor holding the key data generated 

at the data reproducing device so that the key data 
may correspond to the copied data. 

76. A copy control device according to claim 47, further is 
including means for setting key data having a given 
value. 

77. A copy control device according to claim 51 . further 
including means for setting key data having a given 20 
value. 

78. A copy control device according to claim 52, further 
including means for setting key data having a given 
value. 25 

79. A copy control device according to claim 47, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 30 
pleted. 

80. A copy control device according to claim 48, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 35 
each time at least reproduction is started or com- 
pleted. 

81 . A copy control device according to claim 49, further 
including means for changing the contents of the 40 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 

82. A copy control device according to claim 50, further 45 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 

so 

83. A copy control device according to claim 51 , further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 55 

84. A copy control device according to claim 52, further 
including means for changing the contents of the 
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key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 

85. A copy control device according to claim 53, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 

86. A copy control device according to claim 47, 
wherein the data reproducing device includes 
means that has enciphering key data and decipher- 
ing key data related to each other and that enci- 
phers at least the enciphering key data and sending 
it to the drive. 

87. A copy control device according to claim 51 , further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time at least reproduction is started or com- 
pleted. 

88. A copy control device according to claim 51 , further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time the contents of the specific control data 
read from the large capacity recording medium has 
changed. 

89. A copy control device according to claim 52, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time the contents of the specific control data 
read from the large capacity recording medium has 
changed. 

90. A copy control device according to claim 53, further 
including means for changing the contents of the 
key data used at least in enciphering or deciphering 
each time the contents of the specific control data 
read from the large capacity recording medium has 
changed. 

91. A copy control device according to claim 47, further 
including means for enciphering the key data 
exchanged between the drive and the data repro- 
ducing device on the data transfer means. 

92. A copy control device according to claim 49, further 
including means for enciphering the key data 
exchanged between the drive and the data repro- 
ducing device on the data transfer means. 

93. A copy control device according to claim 50, further 
including means for enciphering the key data 
exchanged between the drive and the data repro- 
ducing device on the data transfer means. 
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94. A copy control device according to claim 51 , further 
including means for enciphering the key data 
exchanged between the drive and the data repro- 
ducing device on the data transfer means 

5 

95. In a system including a data providing device for 
providing data via communication means, a data 
reproducing device for receiving data from the data 
providing device via the communication means, 
reproducing the received data, and outputtjng the io 
reproduced data, and means for recording the data 
provided to the data reproducing device via the 
communication means as copied data, a copy con- 
trol method for data provided through communica- 
tion characterized in that: is 

the data reproducing device issues key data to 
the data providing device; and 
the data providing device enciphers the data to 
be transmitted to the data reproducing device so 
to which the data is to be provided, on the basis 
of the key data received from the data repro- 
ducing device, thereby enabling only the data 
reproducing device that has issued the key 
data used in enciphering to reproduce the cop- 25 
ied data. 

96. In a system including a data providing device for 
providing data via communication means, a data 
reproducing device for receiving data from the data 30 
providing device via the communication means, 
reproducing the received data, and outputting the 
reproduced data, and means for recording the data 
provided to the data reproducing device via the 
communication means as copied data, a copy con- 35 
trol method for data provided through communica- 
tion characterized in that: 

the data providing device and the data repro- 
ducing device temporarily generate mutually *o 
related key data using random data, the data 
providing device enciphers the data to be sent 
to the communication means using its the self- 
generated temporary key data, and the data 
reproducing device deciphers the data « 
received via the communication means using 
its self-generated temporary key data, thereby 
enabling the data received via the communica- 
tion means to be reproduced and disabling the 
copied data obtained by once recording the so 
data from being reproduced. 

97. In a system including a data providing device for 
providing data via communication means, a data 
reproducing device for receiving data from the data 55 
providing device via the communication means, 
reproducing the received data, and outputting the 
reproduced data, and means for recording the data 



provided to the data reproducing device via the 
communication means as copied data, a copy con- 
trol method for data provided through communica- 
tion characterized in that: 

the data providing device sends copy permis- 
sion data specifying the permission level of 
copied data to the data reproducing device; 
and 

the data reproducing device recognizes the 
permission level of copy of the provided data 
on the basis of the copy permission data 
received from the data providing device and, 
when the recognized level is the permission 
level enabling the copied data to be repro- 
duced, the data to be provided is given without 
enciphering to the data reproducing device via 
the communication means, and 
when the recognized level is the permission 
level enabling only a specific data reproducing 
device to reproduce the copied data, the key 
data is received from the data reproducing 
device and the provided data enciphered on 
the basis of the key data is given to the data 
reproducing device via the communication 
means, and 

when the recognized level is the permission 
level inhibiting the copied data from being 
reproduced, the data providing device and the 
data reproducing device temporarily generate 
mutually related key data using random data, 
and the provided data enciphered on the basis 
of the key data is given to the data reproducing 
device via the communication means. 

98. A copy control method for data provided through 
communication according to claim 95, wherein the 
communication means is implemented by a compu- 
ter device and a communication channel connected 
to the device. 

99. A copy control method for data provided through 
communication according to claim 96, wherein the 
communication means is implemented by a compu- 
ter device and a communication channel connected 
to the device. 

100. A copy control method for data provided through 
communication according to claim 97, wherein the 
communication means is implemented by a compu- 
ter device and a communication channel connected 
to the device. 

101. In a system including a data providing device for 
providing data via communication means, a data 
reproducing device for receiving data from the data 
providing device via communication means, repro- 
ducing the received data, and outputting the repro- 
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duced data, and means for recording the data 
provided to the data reproducing device via the 
communication means via copied data, a copy con- 
trol device for data provided through communica- 
tion characterized in that: 5 

the data reproducing device is provided with 
means for creating key data unique to itself; 
and 

the data providing device is provided with 10 
means for receiving the key data from the data 
reproducing device and enciphering the pro- 
vided data on the basis of the key data, thereby 
enabling only the data reproducing device hav- 
ing the key data used in enciphering to repro- is 
duce the copied data. 

102.ln a system including a data providing device for 
providing data via communication means, a data 
reproducing device for receiving data from the data 20 
providing device via the communication means, 
reproducing the received data, and outputting the 
reproduced data, and means for recording the data 
provided to the data reproducing device via the 
communication means as copied data, a copy con- 25 
trol device for data provided through communica- 
tion characterized in that: 

the data providing device and the data repro- 
ducing device are each provided with means 30 
for generating key data separately on the basis 
of mutually related data, whereby 
the data providing device enciphers the pro- 
vided data to be sent to the communication 
means using its self-generated key data and 35 
the data reproducing device deciphers the data 
received via the communication means using 
its self-generated data. 

103.ln a system including a data providing device for ao 
providing data via communication means, a data 
reproducing device for receiving data from the data 
providing device via communication means, repro- 
ducing the received data, and outputting the repro- 
duced data, and means for recording the data 45 
provided to the data reproducing device via the 
communication means as copied data, a copy con- 
trol device for data provided through communica- 
tion characterized in that: 

50 

the data providing device is provided with 
means for recognizing the copy permission 
level of data in providing the data and means 
for giving to the data reproducing device the 
data to be provided without enciphering it via 55 
the communication means, when the copy per- 
mission data is at the level permitting the repro- 
duction of the copied data; and 



when the copy permission data is at the level 
permitting only a specific data reproducing 
device to reproduce the copied data, the key 
data generated by the data reproducing device 
that is to reproduce is received and the pro- 
vided data enciphered on the basis of the key 
data is given to the data reproducing device via 
the communication means; and 
when the copy permission data is not the level 
preventing the reproduction of the copied data, 
random data is received from the data repro- 
ducing device that is to reproduce and tempo- 
rary key data is generated on the basis of the 
received data and the provided data enci- 
phered on the basis of the key data is given to 
the data reproducing device via the communi- 
cation means. 

104. A copy control device for data provided through 
communication according to daim 1 01 , wherein the 
communication means is implemented by a com- 
munication channel and a computer device con- 
nected to the channel. 

105. A copy control device for data provided through 
communication according to claim 1 02. wherein the 
communication means is implemented by a com- 
munication channel and a computer device con- 
nected to the channel. 

106. A copy control device for data provided through 
communication according to claim 1 03, wherein the 
communication means is implemented by a com- 
munication channel and a computer device con- 
nected to the channel. 

107. A copy control device according to claim 101. 
wherein the data reproducing device is imple- 
mented by a board provided with an MPEG 
decoder designed for MPEG 1, MPEG 2, or MPEG 



108.A copy control device according to claim 102, 
wherein the data reproducing device is imple- 
mented by a board provided with an MPEG 
decoder designed for MPEG 1, MPEG 2, or MPEG 



109. A copy control device according to claim 103, 
wherein the data reproducing device is imple- 
mented by a board provided with an MPEG 
decoder designed for MPEG 1, MPEG 2, or MPEG 
4. 

110. A copy control device according to claim 104, 
wherein the data reproducing device is imple- 
mented by a board provided with an MPEG 
decoder designed for MPEG 1, MPEG 2, or MPEG 
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4. 

111. A copy control device according to claim 101, 
wherein the data providing device transmits the pro- 
vided data including video data compressed by the 5 
MPEG 1 , MPEG 2, or MPEG 4 scheme to the data 
reproducing device via the communication means. 

112. A copy control device according to claim 102, 
wherein the data providing device transmits the pro- to 
vided data including video data compressed by the 
MPEG 1 . MPEG 2. or MPEG 4 scheme to the data 
reproducing device via the communication means. 

11 3. A copy control device according to claim 103, is 
wherein the data providing device transmits the pro- 
vided data including video data compressed by the 
MPEG 1 , MPEG 2, or MPEG 4 scheme to the data 
reproducing device via the communication means. 

20 

1 1 4.ln a computer system including a reading device for 
reading data from a medium on which provided 
data including video data has been recorded, a 
computer device connected to the reading device, a 
board for reproducing the provided data received by 25 
the computer device, and means for recording the 
data given to the computer device as copied data, a 
copy control device characterized in that: 

the reading device comprises means for gener- 30 
ating a first key data item on the basis of a ran- 
dom number, means for holding the first key 
data item, means for receiving a second key 
data item from the board and holding it, means 
for generating a third key data item from the 35 
first key data item and second key data item, 
means for receiving an enciphered fifth key 
data item unique to the board from the board 
and deciphering it on the basis of the third key 
data item, means for sending the first key data 40 
item to the board, means for reading the copy 
permission data from the medium and holding 
it, and means for selectively enciphering the 
provided data read from the medium using the 
third key data item or fifth key data item accord- 45 
ing to the copy permission data; and 
the board comprises means for generating a 
second key data item on the basis of a random 
number, means for holding the second key data 
item, means for sending the second key data so 
item to the reading device, means for receiving 
the first key data item from the reading device, 
means for generating a fourth key data item 
from the first key data item and second key 
data item, means for generating a fifth and 55 
sixth key data items unique to the board, 
means for enciphering the fifth key data item 
using the fourth key data item and sending it to 



the reading device, means for receiving copy 
permission data from the reading device and 
holding it, means for selectively deciphering 
the provided data received from the computer 
device using the fourth key data item or sixth 
key data item according to the copy permission 
data, whereby 

when enciphering is effected using the fifth key 
data item and deciphering is performed using 
the sixth key data item, only the board that has 
issued each of the key data items is allowed to 
reproduce the copied data read from the 
medium, and when enciphering is effected 
using the third key data item and deciphering is 
performed using the fourth key data item, the 
reproduction of the data read from the medium 
is allowed and the reproduction of the copied 
data is inhibited. 

115.ln a system including a drive for reading the data 
recorded on a large capacity recording medium and 
a data reproducing device for receiving the data 
read from the drive via data transfer means, repro- 
ducing the received data, and outputting the repro- 
duced data, a copy control method characterized in 
that: 

the data transfer means sends a command 
indicating authentication start to the drive; 
the drive generates a random number, sends it 
to the data reproducing device as identification 
data for determining the data reproducing 
device, and the reproducing device enciphers 
the identification data using a first algorithm 
and sends it to the drive as a key for recogniz- 
ing the drive device; 

the drive generates KEY1 by enciphering the 
recognition key using a second algorithm and 
sends it to the reproducing device; 
the reproducing device generates KEY1 by 
enciphering by use of the second algorithm the 
recognition key generated using the first algo- 
rithm, compares this KEY 1 with the KEY 1 
received from the drive, and authenticates the 
drive as being the authentic device when they 
coincide with each other; 
the drive enciphers by use of a third algorithm 
the KEY 1 generated using the second algo- 
rithm and sends the enciphered key to the 
reproducing device as a key for recognizing the 
reproducing device; 

the reproducing device enciphers the received 
recognition key by use of the third algorithm, 
generates KEY 2, and sends it to the drive; 
the drive generates KEY 2 by enciphering by 
use of a fourth algorithm the recognition key 
generated using the third algorithm, compares 
this KEY 2 with the KEY 2 received from the 
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reproducing device, and authenticates the 
reproducing device as being the authentic 
device when they coincide with each other; 
the drive enciphers DISK KEY and TITLE KEY 
recorded on the large capacity recording s 
medium using the KEY 1, KEY 2, and a fifth 
algorithm and sends the enciphered keys to the 
reproducing device; and 
the reproducing device deciphers the enci- 
phered DISK KEY and TITLE KEY received w 
from the drive using the KEY 1 , KEY 2, and the 
fifth algorithm. 

116.A computer program stored on a medium from 
which a computer can read the program, compris- is 

ing: 

a code which causes data transfer means to 
send a command indicating authentication 
start to a drive for reading the data recorded on 20 
a large capacity recording medium, the data 
transfer means transferring data to a data 
reproducing device that receives the data read 
from the drive, reproduces the received data, 
and outputs the reproduced data; 25 
a command to cause the drive to generate a 
random number and send it to the data repro- 
ducing device as identification data for deter- 
mining the data reproducing device; 
a command to cause the reproducing device to 30 
encipher the identification data using a first 
algorithm and send it to the drive as a key for 
recognizing the drive device; 
a command to cause the drive to generate KEY 

1 by enciphering the recognition key using a 35 
second algorithm and send it to the reproduc- 
ing device; 

a command to cause the reproducing device to 
generate KEY 1 by enciphering by use of the 
second algorithm the recognition key gener- to 
ated using the first algorithm, compare this 
KEY 1 with the KEY 1 received from the drive, 
and authenticate the drive as being the authen- 
tic device when they coincide with each other; 
a command to cause the drive to encipher by 45 
use of a third algorithm the KEY 1 generated 
using the second algorithm and send it to the 
reproducing device as a key for recognizing the 
reproducing device; 

a command to cause the reproducing device to so 
generate KEY 2 by enciphering the received 
recognition key using the third algorithm and 
send it to the drive; 

a command to cause the drive to generate KEY 

2 by enciphering by use of a fourth algorithm ss 
the recognition key generated using the third 
algorithm, compare this KEY 2 with the KEY 2 
received from the reproducing device, and 



authenticate the reproducing device as being 
the authentic device when they coincide with 
each other; and 

a command to cause the drive to encipher the 
DISK KEY and TITLE KEY recorded on the 
large capacity recording medium using the 
KEY 1, KEY 2, and a fifth algorithm and send 
the enciphered keys to the reproducing device 
and to cause the reproducing device to deci- 
pher the enciphered DISK KEY and TITLE KEY 
received from the drive using the KEY 1 , KEY 
2, and the fifth algorithm. 
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